@stratusagent/cli 0.11.2 → 0.11.3

package/dist/environment.d.ts

@@ -0,0 +1,108 @@
+import type { StratusConfigFile } from '@stratusagent/state';
+import type { ServiceRunner } from './service.ts';
+export interface CliStreams {
+    stdout: Pick<typeof process.stdout, 'write'>;
+    stderr: Pick<typeof process.stderr, 'write'>;
+}
+export interface CliEnvironment {
+    stdin?: string;
+    stdinStream?: NodeJS.ReadableStream;
+    approvalInput?: NodeJS.ReadableStream;
+    setupInput?: NodeJS.ReadableStream;
+    templateInput?: NodeJS.ReadableStream;
+    processEnv?: NodeJS.ProcessEnv;
+    cwd?: string;
+    /** Home directory override (tests). Defaults to os.homedir(). */
+    homeDir?: string;
+    fetch?: typeof fetch;
+    openExternal?: (url: string) => Promise<void> | void;
+    dashboardAutoShutdownMs?: number;
+    /** Shuts down `stratus serve` the way SIGTERM would (tests). */
+    shutdownSignal?: AbortSignal;
+    /**
+     * Starts the fresh daemon an announced restart asks for and resolves
+     * with its exit code. Injected so tests never spawn a process; the
+     * default runs this CLI's own entrypoint with the serve arguments given.
+     */
+    serveRespawn?: (argv: string[], handoff: RestartHandoff) => Promise<RespawnResult>;
+    /**
+     * The link between a supervised daemon and its supervisor (tests): what
+     * the daemon sends up — the port it bound, the dashboard sessions it
+     * hands on — and what it receives. The default is the IPC channel a
+     * supervisor opens when it spawns a daemon, and does nothing where
+     * there is none.
+     */
+    supervisorLink?: SupervisorLink;
+    /** Ends the process at once (tests). Default `process.exit`. */
+    exitProcess?: (code: number) => void;
+    /** Runs launchctl/systemctl. Injected so tests never touch the real one. */
+    serviceRunner?: ServiceRunner;
+    /** Service-manager platform override (tests) — which unit format and manager commands apply. */
+    servicePlatform?: NodeJS.Platform;
+    /** Reports whether an optional package is installed. Injected so tests do not assert on their own node_modules. */
+    packageResolver?: PackageResolver;
+    /** Installs optional packages. Injected so tests never run npm. */
+    packageInstaller?: PackageInstaller;
+    /** Looks up a package's latest published version. Injected so tests never ask npm. */
+    packageVersionFetcher?: PackageVersionFetcher;
+    /** Reads the version an installed package declares. Injected so tests do not assert on their own node_modules. */
+    installedVersionReader?: InstalledVersionReader;
+}
+/**
+ * A dashboard session as it crosses the restart hand-off: structurally the
+ * control API's `DashboardSession`, declared here rather than imported.
+ * That package is an optional peer, and a type import of it is kept in
+ * this package's declarations — every TypeScript consumer of the CLI would
+ * then need the optional package installed just to type-check.
+ */
+export interface DashboardSession {
+    id: string;
+    /** Epoch milliseconds; a handed session keeps the expiry it was minted with. */
+    expiresAt: number;
+    /** A fingerprint of the bearer token it was minted under; the replacement adopts it only under the same one. */
+    vouchedBy: string;
+}
+/** What a daemon and its supervisor say to each other. See SupervisorLink. */
+export type SupervisorMessage = {
+    type: 'stratusd.bound-api-port';
+    port: number;
+} | {
+    type: 'stratusd.sessions';
+    sessions: DashboardSession[];
+};
+/** One end of the daemon–supervisor channel. */
+export interface SupervisorLink {
+    send(message: SupervisorMessage): void;
+    receive(handler: (message: SupervisorMessage) => void): void;
+}
+/**
+ * What a supervisor hands the daemon it starts: the port its predecessor
+ * bound (a hint, see BOUND_API_PORT_ENV) and the dashboard sessions the
+ * predecessor had live when it stopped, so `stratus restart` does not log
+ * a browser out. In memory end to end; nothing here is written down.
+ */
+export interface RestartHandoff {
+    boundApiPort?: number;
+    sessions: DashboardSession[];
+}
+/** How a daemon the supervisor started ended, and what it handed back before it did. */
+export interface RespawnResult {
+    code: number;
+    boundApiPort?: number;
+    sessions?: DashboardSession[];
+}
+export interface PackageInstallResult {
+    ok: boolean;
+    /** Why it failed, as a line the operator can act on. Empty on success. */
+    message: string;
+}
+/** Installs optional packages globally. */
+export type PackageInstaller = (packages: string[]) => Promise<PackageInstallResult>;
+/** The latest published version of a package, or undefined when the registry did not answer. */
+export type PackageVersionFetcher = (packageName: string) => Promise<string | undefined>;
+/** The version an installed package declares, or undefined when it is not installed. */
+export type InstalledVersionReader = (specifier: string) => Promise<string | undefined>;
+export type CliConfigFile = StratusConfigFile;
+/** Reports whether an optional package is installed. */
+export type PackageResolver = (specifier: string) => boolean;
+//# sourceMappingURL=environment.d.ts.map

package/dist/environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../src/environment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,IAAI,CAAC,OAAO,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,EAAE,IAAI,CAAC,OAAO,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrD,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,gEAAgE;IAChE,cAAc,CAAC,EAAE,WAAW,CAAC;IAC7B;;;;OAIG;IACH,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IACnF;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,gEAAgE;IAChE,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,4EAA4E;IAC5E,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,gGAAgG;IAChG,eAAe,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAClC,mHAAmH;IACnH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,sFAAsF;IACtF,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,kHAAkH;IAClH,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;CACjD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,gHAAgH;IAChH,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,yBAAyB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAAC;AAEhE,gDAAgD;AAChD,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACvC,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,IAAI,GAAG,IAAI,CAAC;CAC9D;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CAC9B;AAED,wFAAwF;AACxF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,2CAA2C;AAC3C,MAAM,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAErF,gGAAgG;AAChG,MAAM,MAAM,qBAAqB,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAEzF,wFAAwF;AACxF,MAAM,MAAM,sBAAsB,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAExF,MAAM,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAE9C,wDAAwD;AACxD,MAAM,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC"}

package/dist/environment.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=environment.js.map

package/dist/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../src/environment.ts"],"names":[],"mappings":""}

package/dist/events.d.ts

@@ -0,0 +1,17 @@
+import type { StratusEvent } from '@stratusagent/core';
+export declare const formatEvent: (event: StratusEvent) => string | null;
+/**
+ * The fields worth keeping per event type. Tool inputs and message text
+ * are deliberately excluded: the log is a trace of what happened, not a
+ * second copy of the transcript.
+ *
+ * The approval pair is the one place the trace carries a person's id, and
+ * it earns it: `always` widens what an agent may do unattended for the rest
+ * of the session, and "who decided that" is unanswerable afterwards from
+ * anything else. The refusal path is warned about by `onDecision`, but an
+ * *approval* produces no warning at all — without these two records a
+ * granted permission leaves no trace whatsoever. Still no tool input: what
+ * was asked is here, what it was asked with is not.
+ */
+export declare const eventDetail: (event: StratusEvent) => Record<string, unknown> | undefined;
+//# sourceMappingURL=events.d.ts.map

package/dist/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvD,eAAO,MAAM,WAAW,GAAI,OAAO,YAAY,KAAG,MAAM,GAAG,IA6B1D,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,WAAW,GAAI,OAAO,YAAY,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAyC3E,CAAC"}

package/dist/events.js

@@ -0,0 +1,87 @@
+import { FORGET_TOOL_NAME, MEMORY_TOOL_NAME } from '@stratusagent/agents';
+export const formatEvent = (event) => {
+    switch (event.type) {
+        case 'session.created':
+            return `• session.created ${event.sessionId}`;
+        case 'session.updated':
+            return `• session.updated ${event.status}`;
+        case 'session.observed':
+            return `• session.observed ${event.sessionId}`;
+        case 'provider.response':
+            return `• provider.response ${event.parts.length} part(s)`;
+        case 'tool.called':
+            return `• tool.called ${event.call.toolName}`;
+        case 'tool.completed':
+            return `• tool.completed ${event.result.toolName} ok=${String(event.result.ok)}`;
+        case 'tool.denied':
+            return `• tool.denied ${event.call.toolName}`;
+        case 'tool.approval-requested':
+            return `• tool.approval-requested ${event.call.toolName} (${event.risk}) for ${event.agentId}`;
+        case 'tool.approval-resolved':
+            return `• tool.approval-resolved ${event.answer} (${event.reason})${event.actor ? ` by ${event.actor}` : ''}`;
+        case 'session.completed':
+            return `• session.completed ${event.sessionId}`;
+        case 'session.failed':
+            return `• session.failed ${event.error}`;
+        case 'session.tainted':
+            return `• session.tainted ${event.trust} (${event.source})`;
+        default:
+            return null;
+    }
+};
+/**
+ * The fields worth keeping per event type. Tool inputs and message text
+ * are deliberately excluded: the log is a trace of what happened, not a
+ * second copy of the transcript.
+ *
+ * The approval pair is the one place the trace carries a person's id, and
+ * it earns it: `always` widens what an agent may do unattended for the rest
+ * of the session, and "who decided that" is unanswerable afterwards from
+ * anything else. The refusal path is warned about by `onDecision`, but an
+ * *approval* produces no warning at all — without these two records a
+ * granted permission leaves no trace whatsoever. Still no tool input: what
+ * was asked is here, what it was asked with is not.
+ */
+export const eventDetail = (event) => {
+    switch (event.type) {
+        case 'session.updated':
+            return { status: event.status };
+        case 'provider.response':
+            return { parts: event.parts.length };
+        case 'tool.called':
+        case 'tool.denied':
+            return { tool: event.call.toolName };
+        case 'tool.completed': {
+            // A memory write or retirement names the entry it touched — the id
+            // is a reference, not content, and "when did the agent learn/drop
+            // this" is unanswerable later without it. The fact itself stays out
+            // of the trace, like every other tool input and output.
+            const output = event.result.output;
+            const entry = (event.result.toolName === MEMORY_TOOL_NAME || event.result.toolName === FORGET_TOOL_NAME)
+                && event.result.ok && typeof output === 'object' && output !== null && !Array.isArray(output)
+                && typeof output.id === 'string'
+                ? output.id
+                : undefined;
+            return { tool: event.result.toolName, ok: event.result.ok, ...(entry !== undefined ? { entry } : {}) };
+        }
+        case 'tool.approval-requested':
+            return { tool: event.call.toolName, risk: event.risk, requestId: event.requestId };
+        case 'tool.approval-resolved':
+            return {
+                requestId: event.requestId,
+                answer: event.answer,
+                reason: event.reason,
+                ...(event.actor ? { actor: event.actor } : {}),
+            };
+        case 'session.failed':
+            return { error: event.error };
+        case 'session.tainted':
+            // The label and what lowered it — a tool's name, or `memory`,
+            // `sender`, `legacy`. Never the content that did: same rule as every
+            // other event here.
+            return { trust: event.trust, source: event.source };
+        default:
+            return undefined;
+    }
+};
+//# sourceMappingURL=events.js.map

package/dist/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE1E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAmB,EAAiB,EAAE;IAChE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,iBAAiB;YACpB,OAAO,qBAAqB,KAAK,CAAC,SAAS,EAAE,CAAC;QAChD,KAAK,iBAAiB;YACpB,OAAO,qBAAqB,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7C,KAAK,kBAAkB;YACrB,OAAO,sBAAsB,KAAK,CAAC,SAAS,EAAE,CAAC;QACjD,KAAK,mBAAmB;YACtB,OAAO,uBAAuB,KAAK,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC;QAC7D,KAAK,aAAa;YAChB,OAAO,iBAAiB,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChD,KAAK,gBAAgB;YACnB,OAAO,oBAAoB,KAAK,CAAC,MAAM,CAAC,QAAQ,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACnF,KAAK,aAAa;YAChB,OAAO,iBAAiB,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChD,KAAK,yBAAyB;YAC5B,OAAO,6BAA6B,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,OAAO,EAAE,CAAC;QACjG,KAAK,wBAAwB;YAC3B,OAAO,4BAA4B,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAChH,KAAK,mBAAmB;YACtB,OAAO,uBAAuB,KAAK,CAAC,SAAS,EAAE,CAAC;QAClD,KAAK,gBAAgB;YACnB,OAAO,oBAAoB,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3C,KAAK,iBAAiB;YACpB,OAAO,qBAAqB,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;QAC9D;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAmB,EAAuC,EAAE;IACtF,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,iBAAiB;YACpB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,mBAAmB;YACtB,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACvC,KAAK,aAAa,CAAC;QACnB,KAAK,aAAa;YAChB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,mEAAmE;YACnE,kEAAkE;YAClE,oEAAoE;YACpE,wDAAwD;YACxD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;YACnC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,gBAAgB,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,gBAAgB,CAAC;mBACnG,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;mBAC1F,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;gBAChC,CAAC,CAAC,MAAM,CAAC,EAAE;gBACX,CAAC,CAAC,SAAS,CAAC;YACd,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACzG,CAAC;QACD,KAAK,yBAAyB;YAC5B,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACrF,KAAK,wBAAwB;YAC3B,OAAO;gBACL,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/C,CAAC;QACJ,KAAK,gBAAgB;YACnB,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAChC,KAAK,iBAAiB;YACpB,8DAA8D;YAC9D,qEAAqE;YACrE,oBAAoB;YACpB,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QACtD;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC,CAAC"}

package/dist/help.d.ts

@@ -0,0 +1,2 @@
+export declare const HELP_TEXT = "Stratus Agent CLI\n\nUsage:\n  stratus setup\n  stratus chat\n  stratus chat --soul ./examples/souls/ava.md\n  stratus run --prompt \"Use the demo tool\"\n  stratus run \"Say hello\"\n  ANTHROPIC_API_KEY=... stratus run --provider anthropic \"Say hello\"\n  stratus run --soul ./examples/souls/ava.md \"Say hello\"\n  echo \"Use the echo tool\" | stratus run --stdin\n  STRATUS_PROVIDER=openai OPENAI_API_KEY=... stratus run \"Say hello\"\n  stratus run --config ./stratus.config.json --provider openai \"Say hello\"\n  stratus agents\n  stratus agents --gateway http://127.0.0.1:4123\n  stratus template add ./examples/templates/example\n  stratus template add stratuslabs/template-oncall --yes\n  stratus skill add stratuslabs/skill-code-review\n  stratus skill add ./my-skills --skill code-review --agent ava\n  stratus skill validate ./my-skill\n  stratus skills\n  stratus plugins\n  stratus plugins --format json\n  stratus skill reload\n  stratus restart\n  stratus schedules\n  stratus schedules cancel <id>\n  stratus grants ava\n  stratus grants revoke ava --tool web.fetch\n  stratus memory list ava\n  stratus memory reassert ava --trust user --all-unknown\n  stratus session rollover slack:ava:T01ABCDEF:D07GHIJKL\n  printf %s \"$BRAVE_KEY\" | stratus credential set search.apiKey\n  stratus credentials\n  stratus doctor\n  stratus update\n  stratus update --check\n  stratus --version\n  stratus service install\n  stratus service status\n  stratus logs -f\n  stratus logs --agent ava -n 200\n  stratus dashboard\n  stratus dashboard --port 4123 --host 0.0.0.0 --no-open\n\nCommands:\n  setup            Menu-driven onboarding: pick a provider, sign in (Claude\n                   subscription or API key), create your agent, enable the\n                   plugins it may use, connect it to Slack, choose who\n                   approves gated calls unattended, and test it \u2014 settings\n                   go to ~/.stratus/config.json,\n                   sign-ins and channel tokens to ~/.stratus/credentials.json\n                   (0600). Save & finish offers to install any optional\n                   package your answers imply (the Slack channel, the control\n                   API and dashboard) before it starts the daemon\n  chat             Talk with your agent \u2014 the conversation persists across turns\n                   and remembered facts accumulate; /exit or Ctrl+C to leave\n  run              Execute one local Stratus Agent session\n  serve            Run stratusd, the always-on gateway: durable sessions, the\n                   whole roster live at once (each agent on its own provider),\n                   delegation, and a watchdog \u2014 one per home (it refuses to\n                   start over a daemon already serving ~/.stratus), and\n                   Ctrl+C / SIGTERM drains cleanly\n                   (--idle-timeout <seconds>, --approvals <headless|remote>,\n                   --no-events, --no-log-file, --config <path>); everything it\n                   says is also written to ~/.stratus/logs, which\n                   \"stratus logs\" reads. With @stratusagent/control-api\n                   installed it also serves the HTTP + WebSocket control API\n                   on 127.0.0.1:4123 (--no-api, --api-host, --api-port, or\n                   the config file's \"api\" block)\n  service          Keep stratusd running under launchd (macOS) or systemd\n                   (Linux): install, uninstall, status, start, stop.\n                   Installing starts it now and at every login\n                   (--no-login installs without the login trigger,\n                   --config <path> pins the daemon to one config file)\n  logs             Read the daemon's log from any terminal: -f to follow,\n                   -n <count> for backlog, --agent / --session to filter,\n                   --format json for the raw records\n  template add     Install a template \u2014 a folder (or GitHub repo) holding\n                   soul files, skills, and the plugin config they need. Prints\n                   every agent, skill, plugin package and config key it would\n                   add, then asks; --yes installs without asking, --force\n                   replaces an agent or skill already installed under the same\n                   name. Plugin packages the template's config.json names are\n                   installed with npm install -g and enabled in\n                   ~/.stratus/config.json, which needs a restart to take\n                   effect. See docs/guides/templates.md for the layout\n  skill add        Install skills from a GitHub repo (owner/repo or URL) or a\n                   local path into ~/.stratus/skills \u2014 whole directories, one\n                   per skill; works with skills published for other agents\n                   (skills.sh-style repos). Installed is not enabled: a soul\n                   opts in via skills:, or pass --agent <id> to enable now.\n                   --skill <id> picks from a multi-skill repo (repeatable),\n                   --force replaces an already-installed id. A skill that\n                   does not conform to the Agent Skills spec is refused,\n                   naming what is wrong; one that installs with caveats\n                   (fields another host owns, a bundled scripts/) says so.\n                   A running daemon reloads its skills afterwards, no\n                   restart (--no-reload skips that)\n  skill validate   Check a skill directory, a directory of skills, or an\n                   installed skill id against the Agent Skills spec \u2014 the\n                   same check \"skill add\" runs, so what validates installs.\n                   Exit 1 if anything would be refused\n  skills           List installed skills and which agents enable each\n                   (also: stratus skill list)\n  plugins          What this machine's plugins are, and where the chain from\n                   installed to callable breaks: whether the package resolves,\n                   whether a trusted config enables it, which agents' tools:\n                   lists select each tool it declares, and what the approval\n                   policy does with a gated call. Read from each package's\n                   manifest, so nothing is imported and no plugin's setup runs\n                   (--format json, --config <path>; also: stratus plugin list)\n  skill reload     Ask the running daemon to re-read ~/.stratus/skills \u2014 for a\n                   skill edited or removed by hand. A skill that will not\n                   load refuses the whole reload and the previous set keeps\n                   serving; nothing becomes reachable to an agent whose soul\n                   does not list it\n  restart          Ask the running daemon for an announced restart \u2014 what a\n                   plugin change needs: it refuses new turns, lets in-flight\n                   ones finish for up to --drain-timeout <seconds> (default\n                   30), then comes back with sessions, schedules, and\n                   channels intact, under the service manager or not\n  credential set   Store a named credential an agent can resolve \u2014 a search\n                   backend asks for search.apiKey. The value is read from\n                   stdin, never from a flag, so it stays out of your shell\n                   history: printf %s \"$KEY\" | stratus credential set\n                   search.apiKey. --agent <id> stores one agent's own key,\n                   which outranks the shared entry for that agent. Storing\n                   grants nothing: the soul still needs credentials: [name]\n  credentials      List stored credential names and which agents have their\n                   own \u2014 names only, never values (also: credential list)\n  credential remove\n                   Forget one (--agent <id> for that agent's own entry)\n  schedules        List every schedule the fleet has set \u2014 cadence, prompt,\n                   pre-authorized destination, next firing \u2014 straight from the\n                   daemon's database (--format json). \"stratus schedules\n                   cancel <id>\" stops the next firing and revokes the\n                   destination that was approved with it\n                   (also: stratus schedule list / schedule cancel <id>)\n  grants           What an agent may do unattended beyond the built-in safe\n                   list \u2014 its standing tool grants, command scopes, and\n                   sites, each an \"always allow\" somebody answered. From the\n                   running daemon when one is serving (--gateway, --token),\n                   else from ~/.stratus/agents/<id>.whitelist.json; --format\n                   json. \"stratus grants revoke <agent> --tool <name> |\n                   --scope \"<command>\" | --origin <origin>\" takes one back,\n                   and a running daemon stops honouring it at once\n  memory list      Show an agent's live memory with the trust label each\n                   entry carries \u2014 user, agent, unknown (no recorded origin,\n                   or written in a conversation with someone not configured\n                   as a principal), external (recorded after reading content\n                   from outside). --trust <level> filters; --format json\n  memory reassert  Re-label entries as an operator: stratus memory reassert\n                   <agent> --trust user <id>..., or --all-unknown for every\n                   entry with no recorded origin (the upgrade case; an\n                   entry recorded unknown \u2014 a stranger's message, a shell\n                   command \u2014 is left for you to name by id). Appends\n                   a record to ~/.stratus/memory.jsonl; a running daemon\n                   sees it on its next turn. The only way a label ever\n                   rises \u2014 no tool can do this\n  session rollover Start a conversation over under the same session id,\n                   archiving its transcript so far \u2014 for a long-lived\n                   session (a Slack DM) that predates provenance tracking\n                   and would otherwise write unknown forever. Asks the\n                   running daemon (--gateway, --token)\n  agent new        Create an agent identity (generates a human-ish name + avatar theme)\n  agents           List your agents: who they are, where their souls live, what\n                   they run on, what they remember (also: stratus agent list).\n                   --gateway <url> asks a running daemon instead of resolving\n                   locally, authenticating with ~/.stratus/gateway-token\n                   (override with --token or STRATUS_GATEWAY_TOKEN)\n  doctor           Show what a run would use right now \u2014 provider, model, soul \u2014\n                   and which file or environment variable decided each, then\n                   flag anything that would surprise you (--format json)\n  update           The whole upgrade dance, in the order that cannot lose\n                   data: stop stratusd, upgrade the package from npm \u2014\n                   together with every optional first-party package this\n                   machine has, which ship in lockstep with it \u2014 run\n                   pending state migrations, rewrite the service unit with\n                   current node/entrypoint paths, restart. --check reports\n                   what it would do without doing any of it (exits 1 when\n                   something is actionable, a companion left behind\n                   included). Works offline too \u2014 an unreachable npm skips\n                   the upgrade but still migrates and repairs the unit\n  dashboard        Open the web dashboard: finds a running daemon (or starts one),\n                   mints a single-use sign-in link, and opens your browser at it.\n                   Needs @stratusagent/control-api and @stratusagent/dashboard\n  help             Show this help message\n  version          Print this build's version (also: --version, -v)\n\nAgent options:\n  --name           Agent name (omit to have one generated)\n  --instructions   The agent's persona/instructions\n  --format         Output format for agent new: text, json, or soul (a ready-to-edit soul file)\n\nOptions:\n  --prompt, -p     Prompt to send to the local agent loop\n  --stdin          Read the prompt from stdin\n  --provider       Provider to use: anthropic, openai, codex, or demo\n  --model          Model name for real providers (anthropic default: claude-opus-5, openai default: gpt-4.1-mini, codex default: gpt-5.5)\n  --base-url       Override the provider API base URL\n  --soul           Run as the agent defined by a soul file (markdown + frontmatter, see examples/souls)\n  --config         Config file path (run: load settings from it, setup: write it)\n  --format         Output format: text or json (default: text)\n  --no-events      Hide event-by-event progress lines in text mode\n  --approvals      run/chat: tool approval mode \u2014 always, ask, or never (default: always)\n                   serve: how the daemon reaches a human \u2014 headless (refuse every\n                   gated call) or remote (ask in Slack). Default headless, or\n                   the config file's \"approvals.mode\"\n  --max-turns      Maximum provider turns per run (default: 8)\n  --port           dashboard: port for a daemon it starts (default: 4123)\n  --host           dashboard: host for a daemon it starts (default: 127.0.0.1)\n  --no-open        Do not open the browser automatically\n  --gateway        agents / skill reload / restart / session rollover: a running\n                   daemon's control API (all but agents default to the daemon\n                   ~/.stratus/gateway.json names)\n  --trust          memory list: show only this label; memory reassert: the\n                   label to record (user, agent, unknown, external)\n  --all-unknown    memory reassert: every live entry with no recorded origin\n  --token          Bearer token for --gateway (default: ~/.stratus/gateway-token)\n  --no-reload      skill add: install without reloading a running daemon\n  -y, --yes        template add: install without the review prompt\n  --reason         restart: why, for the daemon's log\n  --drain-timeout  restart: seconds the daemon lets in-flight turns finish\n                   before aborting them (default: 30)\n  --no-api         serve: do not serve the control API\n  --api            serve: serve it even where the config says api.enabled: false\n  --api-host       serve: control API interface (default: 127.0.0.1)\n  --api-port       serve: control API port (default: 4123, 0 for any free port)\n  --help, -h       Show this help message\n  --version, -v    Print this build's version and exit\n\nConfig file:\n  The CLI looks for ./stratus.config.json first, then a path from --config / STRATUS_CONFIG,\n  then the global ~/.stratus/config.json written by `stratus setup`.\n  A \"soul\" key (or STRATUS_SOUL) points at a soul file so every run uses that agent.\n\nPlugins (tools):\n  Capability is optional: install a package, then list it under \"plugins\" in a\n  TRUSTED config (--config, STRATUS_CONFIG, or ~/.stratus/config.json), keyed by\n  package name. A plugin runs inside this process, so an auto-discovered\n  project-local stratus.config.json may not enable one.\n\n    \"plugins\": {\n      \"@stratusagent/tool-fs\": { \"enabled\": true, \"roots\": [\"~/notes\"],\n                                 \"agents\": { \"ava\": { \"roots\": [\"~/work/ava\"] } } },\n      \"@stratusagent/tool-web\": { \"enabled\": true }\n    }\n\n  Available: @stratusagent/tool-fs (fs.read/list/search/write),\n  @stratusagent/tool-shell (shell.run), @stratusagent/tool-web (web.fetch),\n  @stratusagent/tool-browser (browser.goto/read/screenshot/act).\n  Installing one grants no agent anything \u2014 each soul lists what it may call.\n\nSoul files:\n  A soul file is markdown with frontmatter (name, provider, model, tools, skills, credentials)\n  followed by the agent's persona in prose. See examples/souls/ava.md.\n  \"tools\" takes exact names or a whole toolset: tools: [fs.read, fs.search] or\n  tools: [fs.*]. Omitted means every registered tool.\n  \"skills\" is the same allowlist shape over installed skills (see stratus\n  skills), except omitted means none \u2014 a skill is enabled per agent, never\n  by being installed.\n";
+//# sourceMappingURL=help.d.ts.map

package/dist/help.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../src/help.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,SAAS,irgBAsQrB,CAAC"}

package/dist/help.js

@@ -0,0 +1,266 @@
+import { DEFAULT_ANTHROPIC_MODEL } from '@stratusagent/provider-anthropic';
+import { DEFAULT_CODEX_MODEL } from '@stratusagent/provider-codex';
+export const HELP_TEXT = `Stratus Agent CLI
+
+Usage:
+  stratus setup
+  stratus chat
+  stratus chat --soul ./examples/souls/ava.md
+  stratus run --prompt "Use the demo tool"
+  stratus run "Say hello"
+  ANTHROPIC_API_KEY=... stratus run --provider anthropic "Say hello"
+  stratus run --soul ./examples/souls/ava.md "Say hello"
+  echo "Use the echo tool" | stratus run --stdin
+  STRATUS_PROVIDER=openai OPENAI_API_KEY=... stratus run "Say hello"
+  stratus run --config ./stratus.config.json --provider openai "Say hello"
+  stratus agents
+  stratus agents --gateway http://127.0.0.1:4123
+  stratus template add ./examples/templates/example
+  stratus template add stratuslabs/template-oncall --yes
+  stratus skill add stratuslabs/skill-code-review
+  stratus skill add ./my-skills --skill code-review --agent ava
+  stratus skill validate ./my-skill
+  stratus skills
+  stratus plugins
+  stratus plugins --format json
+  stratus skill reload
+  stratus restart
+  stratus schedules
+  stratus schedules cancel <id>
+  stratus grants ava
+  stratus grants revoke ava --tool web.fetch
+  stratus memory list ava
+  stratus memory reassert ava --trust user --all-unknown
+  stratus session rollover slack:ava:T01ABCDEF:D07GHIJKL
+  printf %s "$BRAVE_KEY" | stratus credential set search.apiKey
+  stratus credentials
+  stratus doctor
+  stratus update
+  stratus update --check
+  stratus --version
+  stratus service install
+  stratus service status
+  stratus logs -f
+  stratus logs --agent ava -n 200
+  stratus dashboard
+  stratus dashboard --port 4123 --host 0.0.0.0 --no-open
+
+Commands:
+  setup            Menu-driven onboarding: pick a provider, sign in (Claude
+                   subscription or API key), create your agent, enable the
+                   plugins it may use, connect it to Slack, choose who
+                   approves gated calls unattended, and test it — settings
+                   go to ~/.stratus/config.json,
+                   sign-ins and channel tokens to ~/.stratus/credentials.json
+                   (0600). Save & finish offers to install any optional
+                   package your answers imply (the Slack channel, the control
+                   API and dashboard) before it starts the daemon
+  chat             Talk with your agent — the conversation persists across turns
+                   and remembered facts accumulate; /exit or Ctrl+C to leave
+  run              Execute one local Stratus Agent session
+  serve            Run stratusd, the always-on gateway: durable sessions, the
+                   whole roster live at once (each agent on its own provider),
+                   delegation, and a watchdog — one per home (it refuses to
+                   start over a daemon already serving ~/.stratus), and
+                   Ctrl+C / SIGTERM drains cleanly
+                   (--idle-timeout <seconds>, --approvals <headless|remote>,
+                   --no-events, --no-log-file, --config <path>); everything it
+                   says is also written to ~/.stratus/logs, which
+                   "stratus logs" reads. With @stratusagent/control-api
+                   installed it also serves the HTTP + WebSocket control API
+                   on 127.0.0.1:4123 (--no-api, --api-host, --api-port, or
+                   the config file's "api" block)
+  service          Keep stratusd running under launchd (macOS) or systemd
+                   (Linux): install, uninstall, status, start, stop.
+                   Installing starts it now and at every login
+                   (--no-login installs without the login trigger,
+                   --config <path> pins the daemon to one config file)
+  logs             Read the daemon's log from any terminal: -f to follow,
+                   -n <count> for backlog, --agent / --session to filter,
+                   --format json for the raw records
+  template add     Install a template — a folder (or GitHub repo) holding
+                   soul files, skills, and the plugin config they need. Prints
+                   every agent, skill, plugin package and config key it would
+                   add, then asks; --yes installs without asking, --force
+                   replaces an agent or skill already installed under the same
+                   name. Plugin packages the template's config.json names are
+                   installed with npm install -g and enabled in
+                   ~/.stratus/config.json, which needs a restart to take
+                   effect. See docs/guides/templates.md for the layout
+  skill add        Install skills from a GitHub repo (owner/repo or URL) or a
+                   local path into ~/.stratus/skills — whole directories, one
+                   per skill; works with skills published for other agents
+                   (skills.sh-style repos). Installed is not enabled: a soul
+                   opts in via skills:, or pass --agent <id> to enable now.
+                   --skill <id> picks from a multi-skill repo (repeatable),
+                   --force replaces an already-installed id. A skill that
+                   does not conform to the Agent Skills spec is refused,
+                   naming what is wrong; one that installs with caveats
+                   (fields another host owns, a bundled scripts/) says so.
+                   A running daemon reloads its skills afterwards, no
+                   restart (--no-reload skips that)
+  skill validate   Check a skill directory, a directory of skills, or an
+                   installed skill id against the Agent Skills spec — the
+                   same check "skill add" runs, so what validates installs.
+                   Exit 1 if anything would be refused
+  skills           List installed skills and which agents enable each
+                   (also: stratus skill list)
+  plugins          What this machine's plugins are, and where the chain from
+                   installed to callable breaks: whether the package resolves,
+                   whether a trusted config enables it, which agents' tools:
+                   lists select each tool it declares, and what the approval
+                   policy does with a gated call. Read from each package's
+                   manifest, so nothing is imported and no plugin's setup runs
+                   (--format json, --config <path>; also: stratus plugin list)
+  skill reload     Ask the running daemon to re-read ~/.stratus/skills — for a
+                   skill edited or removed by hand. A skill that will not
+                   load refuses the whole reload and the previous set keeps
+                   serving; nothing becomes reachable to an agent whose soul
+                   does not list it
+  restart          Ask the running daemon for an announced restart — what a
+                   plugin change needs: it refuses new turns, lets in-flight
+                   ones finish for up to --drain-timeout <seconds> (default
+                   30), then comes back with sessions, schedules, and
+                   channels intact, under the service manager or not
+  credential set   Store a named credential an agent can resolve — a search
+                   backend asks for search.apiKey. The value is read from
+                   stdin, never from a flag, so it stays out of your shell
+                   history: printf %s "$KEY" | stratus credential set
+                   search.apiKey. --agent <id> stores one agent's own key,
+                   which outranks the shared entry for that agent. Storing
+                   grants nothing: the soul still needs credentials: [name]
+  credentials      List stored credential names and which agents have their
+                   own — names only, never values (also: credential list)
+  credential remove
+                   Forget one (--agent <id> for that agent's own entry)
+  schedules        List every schedule the fleet has set — cadence, prompt,
+                   pre-authorized destination, next firing — straight from the
+                   daemon's database (--format json). "stratus schedules
+                   cancel <id>" stops the next firing and revokes the
+                   destination that was approved with it
+                   (also: stratus schedule list / schedule cancel <id>)
+  grants           What an agent may do unattended beyond the built-in safe
+                   list — its standing tool grants, command scopes, and
+                   sites, each an "always allow" somebody answered. From the
+                   running daemon when one is serving (--gateway, --token),
+                   else from ~/.stratus/agents/<id>.whitelist.json; --format
+                   json. "stratus grants revoke <agent> --tool <name> |
+                   --scope "<command>" | --origin <origin>" takes one back,
+                   and a running daemon stops honouring it at once
+  memory list      Show an agent's live memory with the trust label each
+                   entry carries — user, agent, unknown (no recorded origin,
+                   or written in a conversation with someone not configured
+                   as a principal), external (recorded after reading content
+                   from outside). --trust <level> filters; --format json
+  memory reassert  Re-label entries as an operator: stratus memory reassert
+                   <agent> --trust user <id>..., or --all-unknown for every
+                   entry with no recorded origin (the upgrade case; an
+                   entry recorded unknown — a stranger's message, a shell
+                   command — is left for you to name by id). Appends
+                   a record to ~/.stratus/memory.jsonl; a running daemon
+                   sees it on its next turn. The only way a label ever
+                   rises — no tool can do this
+  session rollover Start a conversation over under the same session id,
+                   archiving its transcript so far — for a long-lived
+                   session (a Slack DM) that predates provenance tracking
+                   and would otherwise write unknown forever. Asks the
+                   running daemon (--gateway, --token)
+  agent new        Create an agent identity (generates a human-ish name + avatar theme)
+  agents           List your agents: who they are, where their souls live, what
+                   they run on, what they remember (also: stratus agent list).
+                   --gateway <url> asks a running daemon instead of resolving
+                   locally, authenticating with ~/.stratus/gateway-token
+                   (override with --token or STRATUS_GATEWAY_TOKEN)
+  doctor           Show what a run would use right now — provider, model, soul —
+                   and which file or environment variable decided each, then
+                   flag anything that would surprise you (--format json)
+  update           The whole upgrade dance, in the order that cannot lose
+                   data: stop stratusd, upgrade the package from npm —
+                   together with every optional first-party package this
+                   machine has, which ship in lockstep with it — run
+                   pending state migrations, rewrite the service unit with
+                   current node/entrypoint paths, restart. --check reports
+                   what it would do without doing any of it (exits 1 when
+                   something is actionable, a companion left behind
+                   included). Works offline too — an unreachable npm skips
+                   the upgrade but still migrates and repairs the unit
+  dashboard        Open the web dashboard: finds a running daemon (or starts one),
+                   mints a single-use sign-in link, and opens your browser at it.
+                   Needs @stratusagent/control-api and @stratusagent/dashboard
+  help             Show this help message
+  version          Print this build's version (also: --version, -v)
+
+Agent options:
+  --name           Agent name (omit to have one generated)
+  --instructions   The agent's persona/instructions
+  --format         Output format for agent new: text, json, or soul (a ready-to-edit soul file)
+
+Options:
+  --prompt, -p     Prompt to send to the local agent loop
+  --stdin          Read the prompt from stdin
+  --provider       Provider to use: anthropic, openai, codex, or demo
+  --model          Model name for real providers (anthropic default: ${DEFAULT_ANTHROPIC_MODEL}, openai default: gpt-4.1-mini, codex default: ${DEFAULT_CODEX_MODEL})
+  --base-url       Override the provider API base URL
+  --soul           Run as the agent defined by a soul file (markdown + frontmatter, see examples/souls)
+  --config         Config file path (run: load settings from it, setup: write it)
+  --format         Output format: text or json (default: text)
+  --no-events      Hide event-by-event progress lines in text mode
+  --approvals      run/chat: tool approval mode — always, ask, or never (default: always)
+                   serve: how the daemon reaches a human — headless (refuse every
+                   gated call) or remote (ask in Slack). Default headless, or
+                   the config file's "approvals.mode"
+  --max-turns      Maximum provider turns per run (default: 8)
+  --port           dashboard: port for a daemon it starts (default: 4123)
+  --host           dashboard: host for a daemon it starts (default: 127.0.0.1)
+  --no-open        Do not open the browser automatically
+  --gateway        agents / skill reload / restart / session rollover: a running
+                   daemon's control API (all but agents default to the daemon
+                   ~/.stratus/gateway.json names)
+  --trust          memory list: show only this label; memory reassert: the
+                   label to record (user, agent, unknown, external)
+  --all-unknown    memory reassert: every live entry with no recorded origin
+  --token          Bearer token for --gateway (default: ~/.stratus/gateway-token)
+  --no-reload      skill add: install without reloading a running daemon
+  -y, --yes        template add: install without the review prompt
+  --reason         restart: why, for the daemon's log
+  --drain-timeout  restart: seconds the daemon lets in-flight turns finish
+                   before aborting them (default: 30)
+  --no-api         serve: do not serve the control API
+  --api            serve: serve it even where the config says api.enabled: false
+  --api-host       serve: control API interface (default: 127.0.0.1)
+  --api-port       serve: control API port (default: 4123, 0 for any free port)
+  --help, -h       Show this help message
+  --version, -v    Print this build's version and exit
+
+Config file:
+  The CLI looks for ./stratus.config.json first, then a path from --config / STRATUS_CONFIG,
+  then the global ~/.stratus/config.json written by \`stratus setup\`.
+  A "soul" key (or STRATUS_SOUL) points at a soul file so every run uses that agent.
+
+Plugins (tools):
+  Capability is optional: install a package, then list it under "plugins" in a
+  TRUSTED config (--config, STRATUS_CONFIG, or ~/.stratus/config.json), keyed by
+  package name. A plugin runs inside this process, so an auto-discovered
+  project-local stratus.config.json may not enable one.
+
+    "plugins": {
+      "@stratusagent/tool-fs": { "enabled": true, "roots": ["~/notes"],
+                                 "agents": { "ava": { "roots": ["~/work/ava"] } } },
+      "@stratusagent/tool-web": { "enabled": true }
+    }
+
+  Available: @stratusagent/tool-fs (fs.read/list/search/write),
+  @stratusagent/tool-shell (shell.run), @stratusagent/tool-web (web.fetch),
+  @stratusagent/tool-browser (browser.goto/read/screenshot/act).
+  Installing one grants no agent anything — each soul lists what it may call.
+
+Soul files:
+  A soul file is markdown with frontmatter (name, provider, model, tools, skills, credentials)
+  followed by the agent's persona in prose. See examples/souls/ava.md.
+  "tools" takes exact names or a whole toolset: tools: [fs.read, fs.search] or
+  tools: [fs.*]. Omitted means every registered tool.
+  "skills" is the same allowlist shape over installed skills (see stratus
+  skills), except omitted means none — a skill is enabled per agent, never
+  by being installed.
+`;
+//# sourceMappingURL=help.js.map

package/dist/help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.js","sourceRoot":"","sources":["../src/help.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uEAuM8C,uBAAuB,kDAAkD,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+DlK,CAAC"}